Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: a1ne+3PtSjxv43PjGKfDfxtg/iAI1gon3HBahUJ415E=
Subject key identifier: B2:06:AC:96:FD:8B:FF:F1:97:07:79:94:36:95:28:9C:79:5B:DC:8F
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 019CE3D9C96012356A13A3A63B5692489823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 074C
Signing time: Thu 12 Mar 2026 21:00:26 +0000
Manifest this update: Thu 12 Mar 2026 21:00:26 +0000
Manifest next update: Fri 13 Mar 2026 21:00:26 +0000
Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: 5PbmBlwe2RqpbWGnPOwEDqziC4VTgUPwCDR9ctimHpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:c9:60:12:35:6a:13:a3:a6:3b:56:92:48:98:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Mar 12 21:00:26 2026 GMT
Not After : Mar 13 21:00:26 2026 GMT
Subject: CN=b206ac96fd8bfff1970779943695289c795bdc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:06:9d:2e:15:ea:67:53:34:44:60:e1:f2:
6c:da:d0:c1:95:f4:e9:6e:5f:87:2f:d6:ac:f9:9b:
b8:7e:f6:97:4a:0a:0b:87:c5:69:01:ea:a5:8f:54:
7c:76:82:fd:4f:63:54:b3:53:8d:9f:80:3c:4a:89:
27:5e:92:47:e7:f3:4c:4a:54:9d:fd:22:7d:be:c5:
87:ab:49:37:b4:b9:3c:e4:07:f8:4c:97:74:59:36:
9c:79:0d:b4:9d:47:82:7d:8b:49:b4:96:70:72:1a:
29:b9:f6:97:c5:26:e9:48:a2:ba:a5:49:a5:84:72:
22:9a:56:3e:a5:67:7f:8e:e7:2a:4b:8c:2b:14:28:
80:75:e2:fb:64:8d:84:4d:d0:b8:db:d7:83:a9:37:
3c:44:cd:10:a8:39:05:3a:79:ae:75:6a:18:3e:41:
0d:bd:01:2c:67:b8:37:f0:3d:3d:88:d7:a1:4c:b0:
cf:ab:ca:35:05:12:46:ac:aa:5e:a8:b5:65:4a:8b:
7d:35:52:e4:c7:7d:de:3d:31:55:af:3c:77:ab:9c:
e2:d3:59:40:46:78:60:00:1e:54:55:8b:8b:f2:63:
fb:a0:dd:10:84:6e:29:5a:17:3a:d5:23:86:09:19:
e7:aa:db:80:4b:bf:46:58:c2:f3:b5:bb:4b:a7:89:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:06:AC:96:FD:8B:FF:F1:97:07:79:94:36:95:28:9C:79:5B:DC:8F
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:23:0a:9a:6b:47:f6:b0:de:55:92:b4:a4:11:d1:52:fe:a7:
58:d9:ff:01:23:2e:f7:f7:c2:d3:5d:54:bd:33:71:c7:91:6e:
08:dd:03:6a:6d:19:87:04:15:88:6e:89:06:64:34:4b:78:33:
16:de:37:a0:10:c4:7f:ea:17:c6:c3:69:51:8e:6e:64:d2:39:
a5:93:c7:f8:55:8d:6e:6f:25:b3:c8:7f:c4:f4:28:e7:f3:e9:
ed:e8:c5:94:fc:18:ec:31:05:ca:85:96:f5:fb:24:01:46:a2:
72:61:7e:92:6e:e8:27:01:31:64:a6:32:7c:cf:a0:0d:1c:ec:
7a:42:23:c0:97:00:a7:4d:14:ba:e7:e6:97:18:bc:a3:d8:4c:
f1:e5:fc:85:e5:27:9a:ac:7b:18:49:f6:76:fe:35:83:06:0f:
51:c8:f4:75:98:54:a7:90:17:8c:fd:3a:9b:e3:b1:76:da:e9:
d0:40:26:24:c1:2b:9e:e9:2e:e9:c4:d9:51:29:32:6c:f3:1c:
8f:39:e0:ea:b6:db:8d:f4:47:6d:02:be:61:44:bc:b9:c2:19:
12:59:86:44:d8:37:dd:33:23:21:bc:e0:fc:c2:c3:c3:14:fd:
a1:02:8f:f4:d1:ad:2e:d7:db:b7:d4:1d:1d:24:b9:7a:ee:c6:
1f:0f:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:48:27 2026 by rpki-client